$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9ce9096b-9364-4bb7-8d0f-cf108645dca8.roa File: 9ce9096b-9364-4bb7-8d0f-cf108645dca8.roa (raw, json) Hash identifier: L9OXXM+/2YwUmQ9CzDGjwNBKwKeWBj+2H1apupcVt2E= Subject key identifier: BA:BE:7B:0A:E2:62:D3:B3:98:E1:4E:8F:BA:EE:A9:5D:BC:92:D5:2D Certificate issuer: /CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Certificate serial: 4BDC7F99C518F1CD2FCDD35EC3A4CD14C52B50FA Authority key identifier: 6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9ce9096b-9364-4bb7-8d0f-cf108645dca8.roa Signing time: Mon 19 Oct 2026 01:50:17 +0000 ROA not before: Mon 19 Oct 2026 01:50:17 +0000 ROA not after: Sun 17 Jan 2027 23:59:59 +0000 asID: 14618 IP address blocks: 35.96.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/6755970c-4747-499d-9774-5e1308c501a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:dc:7f:99:c5:18:f1:cd:2f:cd:d3:5e:c3:a4:cd:14:c5:2b:50:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c Validity Not Before: Oct 19 01:50:17 2026 GMT Not After : Jan 17 23:59:59 2027 GMT Subject: serialNumber=8b6cde97194df485cb62cd2d5ca1c8b27a9cbcf65633ff54d789d0474a25bf4f, CN=8cd8442f-235f-4171-84e6-8e1007a64c60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4e:ac:f4:61:12:06:01:c6:d8:05:d7:c3:f6: de:fd:7d:c0:ae:e3:d0:1f:10:a3:7b:40:42:ab:32: 63:04:a1:9d:02:28:9e:17:d0:96:12:c9:ee:f3:db: 87:c2:a8:a0:26:5f:db:7b:47:62:6b:0e:67:03:79: b9:0f:ff:2c:86:61:5d:a8:7a:78:ab:e1:14:14:7e: 59:15:d9:a7:3a:de:4d:45:f6:6a:e2:82:84:db:2a: 5f:f8:1f:2f:e5:6d:c6:12:f1:dc:96:f8:f8:dc:f2: 1c:27:24:85:43:65:bb:ce:39:3a:3a:11:fc:80:60: 54:ba:f3:b7:c3:ea:09:f1:7b:bd:37:72:63:6d:0d: 47:f7:00:2a:e9:eb:1c:1f:44:a8:4a:7e:83:1f:b7: e6:a4:51:93:75:51:34:86:22:98:7f:ad:f0:ee:11: 8e:11:a9:d1:98:87:e2:4b:09:f5:48:5c:39:26:9f: 2f:a2:f4:0e:c1:cf:de:02:b8:28:17:f0:9b:79:8d: 5f:c4:83:16:88:eb:d7:c3:de:49:74:da:c1:7c:22: 06:21:38:01:f9:7d:03:e3:27:10:24:9a:92:11:ee: 32:3a:86:46:d4:62:86:d2:28:c6:18:a0:15:40:11: c3:03:ad:bf:2c:6b:88:4b:6e:1b:05:11:36:3c:c9: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:BE:7B:0A:E2:62:D3:B3:98:E1:4E:8F:BA:EE:A9:5D:BC:92:D5:2D X509v3 Authority Key Identifier: keyid:6A:CC:3E:7D:A2:E7:6D:99:11:0F:D6:39:C4:13:7E:42:42:99:70:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6755970c-4747-499d-9774-5e1308c501a7/9ab015f3826e013512a45298a42f2baba1fa72f8d27938878c.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/9ce9096b-9364-4bb7-8d0f-cf108645dca8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e72d8db0-4728-4fc1-bdd8-471129866362/bgE1EqRSmKQvK6uh-nL40nk4h4w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 35.96.48.0/24 Signature Algorithm: sha256WithRSAEncryption 3c:c9:b7:07:6d:dc:ba:cc:c6:d5:6c:4c:08:ed:4f:ed:77:91: 25:3a:0d:42:eb:88:ee:49:7d:b6:59:1f:0c:3c:fc:4a:f1:ab: d2:b5:c1:dd:fc:6d:f1:7e:5d:fd:0d:bf:8d:f8:10:96:78:ff: 2b:28:11:b0:15:9d:d3:68:bf:08:3f:f0:93:89:1f:2b:10:e7: c3:0e:49:39:95:38:a8:55:a7:9a:76:cc:41:9d:91:ba:70:a0: dd:0e:9a:b8:1c:3c:b6:cf:54:cb:ba:9a:fc:86:a0:4c:d1:ae: 1b:ac:f9:b0:00:df:bc:ed:4c:a4:44:4f:af:ab:2f:95:d8:bb: cc:7a:96:d1:43:e2:9d:ea:bb:18:47:80:32:ba:42:ac:ad:cf: 40:11:21:ee:c1:7b:01:c9:5f:09:47:6d:fa:08:2a:eb:95:56: 62:07:63:77:41:1a:d9:10:01:ce:40:3f:97:df:5e:03:b5:f1: 80:c9:e2:fd:32:b7:83:4a:af:31:79:7c:8b:a8:25:42:b5:ed: fc:62:29:ed:e1:6d:e5:22:d7:9b:a4:ab:85:b2:1c:b3:ac:ac: 1c:bb:d1:dd:14:b2:57:6e:e8:a2:39:76:57:5f:50:69:44:b8: 32:f7:12:32:59:3e:06:fc:74:10:a6:1e:ca:c0:d8:56:48:22: 08:9b:00:38 -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUS9x/mcUY8c0vzdNew6TNFMUrUPowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1Mjk4YTQyZjJiYWJh MWZhNzJmOGQyNzkzODg3OGMwHhcNMjYxMDE5MDE1MDE3WhcNMjcwMTE3MjM1OTU5 WjB6MUkwRwYDVQQFE0A4YjZjZGU5NzE5NGRmNDg1Y2I2MmNkMmQ1Y2ExYzhiMjdh OWNiY2Y2NTYzM2ZmNTRkNzg5ZDA0NzRhMjViZjRmMS0wKwYDVQQDEyQ4Y2Q4NDQy Zi0yMzVmLTQxNzEtODRlNi04ZTEwMDdhNjRjNjAwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyTqz0YRIGAcbYBdfD9t79fcCu49AfEKN7QEKrMmMEoZ0C KJ4X0JYSye7z24fCqKAmX9t7R2JrDmcDebkP/yyGYV2oenir4RQUflkV2ac63k1F 9mrigoTbKl/4Hy/lbcYS8dyW+Pjc8hwnJIVDZbvOOTo6EfyAYFS687fD6gnxe703 cmNtDUf3ACrp6xwfRKhKfoMft+akUZN1UTSGIph/rfDuEY4RqdGYh+JLCfVIXDkm ny+i9A7Bz94CuCgX8Jt5jV/EgxaI69fD3kl02sF8IgYhOAH5fQPjJxAkmpIR7jI6 hkbUYobSKMYYoBVAEcMDrb8sa4hLbhsFETY8yaTbAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUur57CuJi07OY4U6Puu6pXbyS1S0wHwYDVR0jBBgwFoAUasw+faLnbZkR D9Y5xBN+QkKZcNgwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NzU1OTcwYy00 NzQ3LTQ5OWQtOTc3NC01ZTEzMDhjNTAxYTcvOWFiMDE1ZjM4MjZlMDEzNTEyYTQ1 Mjk4YTQyZjJiYWJhMWZhNzJmOGQyNzkzODg3OGMuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvZTcyZDhkYjAtNDcyOC00ZmMxLWJkZDgtNDcx MTI5ODY2MzYyLzljZTkwOTZiLTkzNjQtNGJiNy04ZDBmLWNmMTA4NjQ1ZGNhOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lL2U3MmQ4ZGIwLTQ3MjgtNGZjMS1iZGQ4 LTQ3MTEyOTg2NjM2Mi9iZ0UxRXFSU21LUXZLNnVoLW5MNDBuazRoNHcuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBAAjYDAwDQYJKoZIhvcNAQELBQADggEBADzJtwdt3LrMxtVsTAjtT+13kSU6 DULriO5JfbZZHww8/Erxq9K1wd38bfF+Xf0Nv434EJZ4/ysoEbAVndNovwg/8JOJ HysQ58MOSTmVOKhVp5p2zEGdkbpwoN0OmrgcPLbPVMu6mvyGoEzRrhus+bAA37zt TKRET6+rL5XYu8x6ltFD4p3quxhHgDK6Qqytz0ARIe7BewHJXwlHbfoIKuuVVmIH Y3dBGtkQAc5AP5ffXgO18YDJ4v0yt4NKrzF5fIuoJUK17fxiKe3hbeUi15ukq4Wy HLOsrBy70d0Usldu6KI5dldfUGlEuDL3EjJZPgb8dBCmHsrA2FZIIgibADg= -----END CERTIFICATE-----Generated at Sun Nov 15 21:42:21 2026 by rpki-client